$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer File: ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer (raw, json) Hash identifier: Vw+AnwbVFiKw/uyaHlWWdAVh3EAbOBU/rVSzujwtUS8= Subject key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847EBE591E4AB67CCA903675A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Nov 2024 15:17:28 +0000 Certificate not after: Sun 21 Feb 2027 15:17:28 +0000 Subordinate resources: IP: 45.45.212.0/24 IP: 107.191.76.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:e5:91:e4:ab:67:cc:a9:03:67:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 18 15:17:28 2024 GMT Not After : Feb 21 15:17:28 2027 GMT Subject: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:8f:02:ac:8d:da:ea:ab:e7:15:cf:a2:a3: 22:ff:05:15:ed:c9:05:ef:6b:8b:db:49:e8:5d:cb: f4:9a:f0:e3:83:c8:20:02:8c:a1:51:79:a4:83:5d: 2f:83:e6:f1:00:96:02:e5:98:e7:5b:c5:db:9c:8d: 6a:5f:1b:f6:51:d4:b2:f2:b5:a7:08:ce:73:cd:8e: 94:1a:e2:1a:3a:b3:ab:61:4a:04:96:66:ea:be:92: 3d:8f:83:31:39:a2:e9:36:c6:34:f0:c4:be:65:01: 29:56:c6:c4:3d:e4:99:dc:1f:a8:3f:90:da:94:a5: fe:d8:8a:c7:61:b3:55:7f:15:2f:66:ea:09:9c:14: c2:2e:09:54:9f:42:ed:26:05:71:94:87:40:f8:ed: d2:10:58:90:07:d7:09:c3:27:70:7c:a4:9e:7e:e4: fe:8f:29:9a:7a:82:a9:79:ba:e7:7d:0e:f5:c3:f4: 1d:54:23:9d:20:81:19:7f:af:94:1f:37:aa:4b:de: 43:0f:f4:f0:b8:a7:34:53:78:c6:1d:44:2a:72:be: f3:8d:44:59:c2:bb:11:76:db:be:d6:07:f3:d8:c4: 60:a1:10:2b:e9:ea:53:0b:bb:e4:02:12:8f:25:1e: f9:73:ee:4e:8b:94:b7:6e:15:f0:0b:13:98:fe:ae: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 45.45.212.0/24 107.191.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6e:35:3c:a7:ab:9f:2d:2b:f0:01:98:7f:83:d4:e8:1a:45: 2e:5a:55:4c:5e:af:18:79:7b:8e:84:50:61:1e:1f:42:59:24: ba:f1:b6:27:88:14:f1:bc:d6:b3:1e:18:e2:60:58:87:85:ed: 9b:0f:fe:6a:72:61:5b:da:00:ff:30:cb:62:0e:99:fe:48:09: bb:12:dc:f9:94:57:31:a4:cb:23:66:bd:c7:1d:1c:56:7c:2b: e2:80:54:15:71:44:db:e1:8e:c0:04:8c:8f:c5:b3:c5:7e:c8: 61:64:0b:a7:d9:de:3c:9d:d3:23:22:c2:8a:52:b0:c5:b7:46: fe:ce:37:b4:61:16:2f:02:8e:a1:a7:96:1f:cc:39:2e:cd:2f: f1:48:14:4f:03:47:d2:45:20:c2:b4:f9:91:df:e4:9b:70:76: 7b:b4:22:2f:03:83:49:f5:67:cd:5b:13:b2:83:3e:91:48:eb: c0:fc:fd:16:1d:4c:ba:b0:b7:13:12:31:03:c7:26:59:6d:eb: f5:ab:8a:de:53:8a:88:c2:96:cd:0c:f3:ea:50:e4:aa:6e:bf: 38:47:58:71:44:8f:b8:03:cf:9e:35:8b:57:c1:ec:b2:fd:f6: d0:38:19:6a:6f:ad:20:cf:6c:73:ae:74:23:1d:59:df:bb:53: e3:e7:e6:c1 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEfr5ZHkq2fMqQNnWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTExODE1MTcyOFoXDTI3MDIyMTE1MTcyOFowLzEtMCsGA1UEAxMk ZWY2ZDdhOTgtYjAyYS00MDc0LWFmZDItOWVlN2NjYjJiZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3yPAqyN2uqr5xXPoqMi/wUV7ckF72uL20no Xcv0mvDjg8ggAoyhUXmkg10vg+bxAJYC5ZjnW8XbnI1qXxv2UdSy8rWnCM5zzY6U GuIaOrOrYUoElmbqvpI9j4MxOaLpNsY08MS+ZQEpVsbEPeSZ3B+oP5DalKX+2IrH YbNVfxUvZuoJnBTCLglUn0LtJgVxlIdA+O3SEFiQB9cJwydwfKSefuT+jymaeoKp ebrnfQ71w/QdVCOdIIEZf6+UHzeqS95DD/TwuKc0U3jGHUQqcr7zjURZwrsRdtu+ 1gfz2MRgoRAr6epTC7vkAhKPJR75c+5Oi5S3bhXwCxOY/q5UiwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCJhT3D3OWuFXSdbHw+tqwF7VacoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9l ZjZkN2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3Y2NiMmJkYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2VmNmQ3YTk4LWIwMmEtNDA3NC1h ZmQyLTllZTdjY2IyYmRiZS9lZjZkN2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3Y2Ni MmJkYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAtLdQDBABrv0wwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV241PKerny0r 8AGYf4PU6BpFLlpVTF6vGHl7joRQYR4fQlkkuvG2J4gU8bzWsx4Y4mBYh4Xtmw/+ anJhW9oA/zDLYg6Z/kgJuxLc+ZRXMaTLI2a9xx0cVnwr4oBUFXFE2+GOwASMj8Wz xX7IYWQLp9nePJ3TIyLCilKwxbdG/s43tGEWLwKOoaeWH8w5Ls0v8UgUTwNH0kUg wrT5kd/km3B2e7QiLwODSfVnzVsTsoM+kUjrwPz9Fh1MurC3ExIxA8cmWW3r9auK 3lOKiMKWzQzz6lDkqm6/OEdYcUSPuAPPnjWLV8Hssv320DgZam+tIM9sc650Ix1Z 37tT4+fmwQ== -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:32 2024 by rpki-client on console-fra.rpki-client.org